[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAqwsW8enV07N7xsj57meUKHXgHQymCfFw675uzPQ4aY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":37,"analysis":138,"fingerprints":242},"new-year-countdown-clock","New Year Countdown Clock","1.0","enclick","https:\u002F\u002Fprofiles.wordpress.org\u002Fenclick\u002F","\u003Cp>New Year countdown clock showing days and hours until New Year day. Select from several designs, sizes, animations and backgrounds\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Select from a range of designs\u003C\u002Fli>\n\u003Cli>Select size, background colours, pictures or animations\u003C\u002Fli>\n\u003Cli>Full range of designs can be seen at \u003Ca href=\"http:\u002F\u002Fmycountdown.org\u002FHoliday\u002FNew_Year\u002Fgetwidget\u002F\" title=\"Generate your own New Year Countdown Clocks\" rel=\"nofollow ugc\">mycountdown.org\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","New Year countdown clock showing days and hours until New Year day. Select from several designs, sizes, animations and backgrounds",50,10401,86,3,"2021-02-18T10:53:00.000Z","5.6.17","1.5","",[20,21,22,4,23],"flash-new-year-countdown","new-year","new-year-countdown","new-year-countdown-widget","https:\u002F\u002Fmycountdown.org\u002Fwordpress-countdown-clock-plugin\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnew-year-countdown-clock.1.0.zip",85,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":33,"avg_security_score":34,"avg_patch_time_days":35,"trust_score":13,"computed_at":36},8,2500,88,30,"2026-04-04T20:59:30.843Z",[38,60,78,99,118],{"slug":39,"name":40,"version":41,"author":42,"author_profile":43,"description":44,"short_description":45,"active_installs":46,"downloaded":47,"rating":48,"num_ratings":49,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":18,"tags":53,"homepage":58,"download_link":59,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"xmas-decoration","Xmas Decoration","1.3","Mr. Meo","https:\u002F\u002Fprofiles.wordpress.org\u002Fmeohen1989\u002F","\u003Cp>Marry Christmas! If you want to refesh your website with new look at Christmas, you’ll love it.\u003C\u002Fp>\n\u003Cp>Like my work?\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fko-fi.com\u002Fmrmeo89\" rel=\"nofollow ugc\">By me a coffee\u003C\u002Fa>\u003C\u002Fp>\n","Decoration for your website at Christmas.",200,36098,100,9,"2020-11-30T15:42:00.000Z","5.3.21","3.4",[54,55,21,56,57],"christmas","decoration","noel","xmas","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fxmas-decoration\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fxmas-decoration.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":48,"downloaded":68,"rating":48,"num_ratings":69,"last_updated":70,"tested_up_to":71,"requires_at_least":72,"requires_php":18,"tags":73,"homepage":76,"download_link":77,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"rocket-fireworks","Rocket Fireworks","1.4","Shahaji Deshmukh","https:\u002F\u002Fprofiles.wordpress.org\u002Fshahaji9\u002F","\u003Cp>Rocket Fireworks Celebration Plugin for your blog or website.\u003C\u002Fp>\n\u003Cp>Celebrate with cool Rocket Firework show for your website or blog visitors. This Plugin is very easy to install & works as great tool when you want celebrate important days with your website visitors by giving them pleasant user experience. Firework rockets blows in multicolor which looks cool, attractive & attentive. This Plugin is perfect match made when you are in mood of celebration with your customers.\u003C\u002Fp>\n\u003Cp>This Plugin is very useful for Diwali, Christmas and New year celebrations.\u003C\u002Fp>\n\u003Cp>Just activate the Plugin it will start rocket fireworks. Enjoy your best days.\u003C\u002Fp>\n","Rocket Fireworks Celebration Plugin for your blog or website.",17608,7,"2023-10-28T11:05:00.000Z","6.3.8","3.0.1",[74,54,75,21,61],"admin","fireworks","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frocket-fireworks\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frocket-fireworks.1.4.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":48,"num_ratings":88,"last_updated":89,"tested_up_to":90,"requires_at_least":91,"requires_php":18,"tags":92,"homepage":18,"download_link":97,"security_score":98,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"custom-awurudu-flakes","Sinhala Avurudu Flakes","1.1","Uvindu Anuradha","https:\u002F\u002Fprofiles.wordpress.org\u002Fuvindu94\u002F","\u003Cp>\u003Cstrong>Custom avurudu flakes\u003C\u002Fstrong> adds a delightful falling avurudu flakes effect to your WordPress site, celebrating the Sinhala avurudu festival. Each flake represents a traditional Sri Lankan food item, including:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Kavum\u003C\u002Fli>\n\u003Cli>Kokis\u003C\u002Fli>\n\u003Cli>Asmi\u003C\u002Fli>\n\u003Cli>Aluwa\u003C\u002Fli>\n\u003Cli>Mung Kavum\u003C\u002Fli>\n\u003Cli>Seeni Murukku\u003C\u002Fli>\n\u003Cli>Banana\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Just activate the plugin to see the festive flakes on every page!\u003C\u002Fp>\n\u003Ch3>Short Description\u003C\u002Fh3>\n\u003Cp>Adds a delightful falling Avurudu Flake effect representing traditional Sinhala Avurudu food items to your WordPress site.\u003C\u002Fp>\n","Custom avurudu flakes adds a delightful falling avurudu flakes effect to your WordPress site, celebrating the Sinhala avurudu festival.",10,486,2,"2024-10-23T06:21:00.000Z","6.6.5","5.0",[93,94,21,95,96],"avurudu-flake","festival","sinhala","sri-lanka","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-awurudu-flakes.zip",92,{"slug":100,"name":101,"version":91,"author":102,"author_profile":103,"description":104,"short_description":105,"active_installs":86,"downloaded":106,"rating":48,"num_ratings":107,"last_updated":108,"tested_up_to":109,"requires_at_least":110,"requires_php":18,"tags":111,"homepage":116,"download_link":117,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"happy-new-year","Happy New Year","melihbey","https:\u002F\u002Fprofiles.wordpress.org\u002Fmelihbey\u002F","\u003Cp>This plugin will create a perfect skin in your wordpress blog.\u003Cbr \u002F>\nAdds a image and song in your template.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin it’s released under the GPLv2, you can use it free of charge on your personal or commercial website.\u003C\u002Fp>\n","This plugin will create a good skin in your wordpress blog.",11469,4,"2016-12-08T15:31:00.000Z","4.6.30","4.0",[112,113,100,114,115],"countdown","happy-christmas","merry-christmas","song","https:\u002F\u002Fwww.melihguney.com\u002Fwordpress-happy-new-year-plugin.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhappy-new-year.5.0.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":86,"downloaded":126,"rating":48,"num_ratings":127,"last_updated":128,"tested_up_to":129,"requires_at_least":91,"requires_php":130,"tags":131,"homepage":136,"download_link":137,"security_score":48,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"happy-new-year-lantern","Happy New Year Lantern（新年快乐灯笼）","2.0.1","dzw6","https:\u002F\u002Fprofiles.wordpress.org\u002Fdzw6\u002F","\u003Cp>本插件会在网站前台展示一组新年灯笼装饰，并尽量只在需要显示时才加载资源，减少对性能的影响。\u003C\u002Fp>\n\u003Cp>演示视频：https:\u002F\u002Fwww.bilibili.com\u002Fvideo\u002FBV1NDi5BGEZ7\u002F?vd_source=daaf1562b90f676edcbbe03e9caf2183\u003C\u002Fp>\n\u003Cp>Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>在“外观 \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> 自定义 \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Happy New Year Lantern”中配置：灯笼位置（左上\u002F右上\u002F两侧）、距离顶部、缩放比例、灯笼间距、摆动幅度、摆动速度、发光强度、灯笼文字（最多 6 个字）。\u003C\u002Fli>\n\u003Cli>前台提供最小化\u002F展开按钮，状态会在访客本地保存（不影响其他访客）。\u003C\u002Fli>\n\u003Cli>支持仅首页显示 \u002F 全站显示，并提供移动端显示开关。\u003C\u002Fli>\n\u003Cli>遵循 \u003Ccode>prefers-reduced-motion\u003C\u002Fcode>：当访客启用减少动态效果时会自动禁用动画。\u003C\u002Fli>\n\u003C\u002Ful>\n","可自定义的新年灯笼挂件，支持在“外观 → 自定义”中调整位置、大小、摆动与发光等。",154,1,"2026-01-29T07:13:00.000Z","6.9.4","7.0",[132,133,134,55,135],"chinese-new-year","customize","customizer","lantern","https:\u002F\u002Fwww.xcbtmw.com\u002F31468.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhappy-new-year-lantern.2.0.1.zip",{"attackSurface":139,"codeSignals":151,"taintFlows":227,"riskAssessment":228,"analyzedAt":241},{"hooks":140,"ajaxHandlers":147,"restRoutes":148,"shortcodes":149,"cronEvents":150,"entryPointCount":27,"unprotectedCount":27},[141],{"type":142,"name":143,"callback":144,"file":145,"line":146},"action","plugins_loaded","new_year_countdown_clock_init","new-year-countdown-clock.php",390,[],[],[],[],{"dangerousFunctions":152,"sqlUsage":164,"outputEscaping":166,"fileOperations":225,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":226},[153,158,161],{"fn":154,"file":155,"line":156,"context":157},"unserialize","functions.php",295,"$dropdown = unserialize($dropdown_ser);",{"fn":154,"file":145,"line":159,"context":160},32,"$group_list = unserialize($group_list_ser);",{"fn":154,"file":145,"line":162,"context":163},40,"$countdown_list = unserialize($countdown_list_ser);",{"prepared":27,"raw":27,"locations":165},[],{"escaped":27,"rawEcho":167,"locations":168},28,[169,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,201,203,205,207,209,211,213,215,217,219,221,223],{"file":155,"line":170,"context":171},16,"raw output",{"file":155,"line":173,"context":171},38,{"file":155,"line":175,"context":171},59,{"file":155,"line":177,"context":171},76,{"file":155,"line":179,"context":171},94,{"file":155,"line":181,"context":171},115,{"file":155,"line":183,"context":171},157,{"file":155,"line":185,"context":171},169,{"file":155,"line":187,"context":171},202,{"file":155,"line":189,"context":171},247,{"file":155,"line":191,"context":171},277,{"file":155,"line":193,"context":171},316,{"file":145,"line":195,"context":171},137,{"file":145,"line":197,"context":171},142,{"file":145,"line":199,"context":171},161,{"file":145,"line":185,"context":171},{"file":145,"line":202,"context":171},179,{"file":145,"line":204,"context":171},210,{"file":145,"line":206,"context":171},226,{"file":145,"line":208,"context":171},242,{"file":145,"line":210,"context":171},251,{"file":145,"line":212,"context":171},309,{"file":145,"line":214,"context":171},315,{"file":145,"line":216,"context":171},362,{"file":145,"line":218,"context":171},363,{"file":145,"line":220,"context":171},364,{"file":145,"line":222,"context":171},373,{"file":145,"line":224,"context":171},378,6,[],[],{"summary":229,"deductions":230},"The \"new-year-countdown-clock\" plugin version 1.0 presents a mixed security posture. On the positive side, the static analysis reveals no direct entry points such as AJAX handlers, REST API routes, shortcodes, or cron events that are accessible to unauthenticated users, which is a significant strength. Furthermore, all SQL queries utilize prepared statements, and there are no recorded vulnerabilities (CVEs) in its history, suggesting a generally stable codebase. However, several concerning code signals raise significant risks. The presence of the `unserialize` function is a critical vulnerability waiting to be exploited if user-supplied data is not rigorously sanitized before being passed to it.  The complete lack of output escaping means any dynamic content displayed by the plugin is highly susceptible to cross-site scripting (XSS) attacks. Additionally, the absence of nonce checks and capability checks on any potential, albeit hidden, entry points or internal functions is a major security oversight, leaving the plugin vulnerable to various forms of injection and unauthorized actions if an attacker can find a way to trigger them.",[231,234,237,239],{"reason":232,"points":233},"Use of unserialize() without proper sanitization",15,{"reason":235,"points":236},"0% of outputs properly escaped (XSS risk)",18,{"reason":238,"points":86},"No nonce checks found",{"reason":240,"points":86},"No capability checks found","2026-03-16T22:03:28.843Z",{"wat":243,"direct":250},{"assetPaths":244,"generatorPatterns":246,"scriptPaths":247,"versionParams":248},[245],"\u002Fwp-content\u002Fplugins\u002Fnew-year-countdown-clock\u002Fclock.js",[],[245],[249],"\u002Fwp-content\u002Fplugins\u002Fnew-year-countdown-clock\u002Fclock.js?ver=",{"cssClasses":251,"htmlComments":252,"htmlAttributes":253,"restEndpoints":290,"jsGlobals":291,"shortcodeOutput":292},[],[],[254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289],"id=\"new-year-countdown-clock-size\"","name=\"new-year-countdown-clock-size\"","id=\"new-year-countdown-clock-typeflag\"","name=\"new-year-countdown-clock-typeflag\"","id=\"new-year-countdown-clock-background\"","name=\"new-year-countdown-clock-background\"","id=\"new-year-countdown-clock-text2\"","name=\"new-year-countdown-clock-text2\"","id=\"new-year-countdown-clock-text1\"","name=\"new-year-countdown-clock-text1\"","id=\"new-year-countdown-clock-countdown\"","name=\"new-year-countdown-clock-countdown\"","id=\"new-year-countdown-clock-group\"","name=\"new-year-countdown-clock-group\"","id=\"new-year-countdown-clock-title\"","name=\"new-year-countdown-clock-title\"","id=\"new-year-countdown-clock-titleflag\"","name=\"new-year-countdown-clock-titleflag\"","id=\"new-year-countdown-clock-transparentflag\"","name=\"new-year-countdown-clock-transparentflag\"","id=\"new-year-countdown-clock-event-day\"","name=\"new-year-countdown-clock-event-day\"","id=\"new-year-countdown-clock-event-month\"","name=\"new-year-countdown-clock-event-month\"","id=\"new-year-countdown-clock-event-year\"","name=\"new-year-countdown-clock-event-year\"","id=\"new-year-countdown-clock-type\"","name=\"new-year-countdown-clock-type\"","id=\"new-year-countdown-clock-text-color\"","name=\"new-year-countdown-clock-text-color\"","id=\"new-year-countdown-clock-border-color\"","name=\"new-year-countdown-clock-border-color\"","id=\"new-year-countdown-clock-background-color\"","name=\"new-year-countdown-clock-background-color\"","id=\"new-year-countdown-clock-timezone\"","name=\"new-year-countdown-clock-timezone\"",[],[],[]]